VDB
BDU%3A2023-07322
BDU%3A2023-07322
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость декодера HPACK языка программирования Golang, связанная с неконтролируемым потреблением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell Inc., Red Hat Inc., Сообщество свободного программного обеспечения, ООО «Ред Софт», Fedora Project, The Go Project, АО "НППКТ" | OpenSUSE Leap, Red Hat Enterprise Linux, SUSE Linux Enterprise Server for SAP Applications, Suse Linux Enterprise Server, Debian GNU/Linux, openSUSE Tumbleweed, Red Hat Quay, JBoss A-MQ, SUSE CaaS Platform, SUSE Linux Enterprise High Performance Computing, РЕД ОС (запись в едином реестре российских программ №3751), SUSE Manager Proxy, SUSE Manager Server, Red Hat Openshift Data Foundation, SUSE Enterprise Storage, Red Hat Advanced Cluster Management for Kubernetes, Red Hat OpenShift Container Platform, Red Hat Satellite, Suse Linux Enterprise Desktop, SUSE Manager Retail Branch Server, SUSE Linux Enterprise Module for Basesystem, SUSE Linux Enterprise Module for Development Tools, Red Hat Web Terminal, Node Maintenance Operator, Fedora, OpenShift Developer Tools and Services, SUSE Linux Enterprise Real Time, Red Hat Ceph Storage, SUSE Linux Enterprise Module for Package Hub, Go, Red Hat OpenShift on AWS, Migration Toolkit for Applications, SUSE Linux Enterprise Module for Containers, Red Hat Ansible Automation Platform, Red Hat Migration Toolkit for Containers, OpenShift Dev Spaces, Red Hat Advanced Cluster Security, Self Node Remediation, hpack, http2, Red Hat OpenShift distributed tracing, Openshift Service Mesh, SUSE Manager Server Module, SUSE Liberty Linux, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), SUSE Manager Client Tools, SUSE Manager Proxy Module, SUSE Linux Micro |
Timeline
- Oct 31, 2023 CVE Published
- Sep 8, 2025 CVE Updated
References
- https://go.dev/cl/468295 url
- https://go.dev/issue/57855 url
- https://pkg.go.dev/vuln/GO-2023-1571 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XX3IMUTZKRQ73PBZM4E2JP4BKYH4C6XE/ url
- https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.11/ url
- http://repo.red-soft.ru/redos/7.3c/x86_64/updates/ url
- https://www.suse.com/security/cve/CVE-2022-41723.html url
- https://go.dev/cl/468135 advisory
- https://groups.google.com/g/golang-announce/c/V0aBFqaFs_E advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MA5XS5DAOJ5PKKNG5TUXKPQOFHT5VBC/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGW7GE2Z32ZT47UFAQFDRQE33B7Q7LMT/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLBQ3A7ROLEQXQLXFDLNJ7MYPKG5GULE/ advisory
- https://security-tracker.debian.org/tracker/CVE-2022-41723 advisory
- https://access.redhat.com/security/cve/CVE-2022-41723 advisory